CVE-2025-9429 MEDIUM

CVE-2025-9429: mtons mblog Post submit cross site scripting

Vendor Mtons
Product mblog
Weakness CWE-79 · XSS
Published August 25, 2025
Last update August 26, 2025

CVSS base score

5.1/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A security vulnerability has been detected in mtons mblog up to 3.5.0. This vulnerability affects unknown code of the file /post/submit of the component Post Handler. The manipulation of the argument content/title/ leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

Key dates

02Disclosure timeline

August 25, 2025 CVE published
August 26, 2025 Record updated

Related vulnerabilities

04Related CVE